authlib

authlib copied to clipboard

Refresh token with requests session, client_credentials grant and without explicitly provided grant_type breaks

1

**Describe the bug** When using Authlib with requests session, `_guess_grant_type` method is used by `fetch_token` but not by `ensure_active_token` so if one initialises the session without adding the grant_type in...

iivanov-qb

**Describe the bug** This is a follow-up to #802 and #755. Currently, to find the alg to use to sign id_tokens, Authlib: - use alg is set in `get_jwt_config`_ if...

azmeuk

**Is your feature request related to a problem? Please describe.** Currently, authlib supports the following environment variables for OAuth configurations: ```text {name}_CLIENT_ID {name}_CLIENT_SECRET {name}_REQUEST_TOKEN_URL {name}_REQUEST_TOKEN_PARAMS {name}_ACCESS_TOKEN_URL {name}_ACCESS_TOKEN_PARAMS {name}_AUTHORIZE_URL {name}_AUTHORIZE_PARAMS {name}_API_BASE_URL...

kimminw00

Make it more feasible to manage multiple tokens

1

**Is your feature request related to a problem? Please describe.** Authlib appears to assume that each OAuth client will have only one token at a time. However, if your app...

rehevkor5

OAuth2 server: `invalid_client` error returned for authorization code request, not documented in RFC 6749, section 4.1.2.1

4

**Describe the "bug"** The authorization code grant error response will contain `invalid_grant` in the `error` field, if an invalid client is used. This is indeed intuitive, but is not documented...

caarmen

Fix httpx oauth1 binary form data

1

See issue https://github.com/authlib/authlib/issues/516 for details. **What kind of change does this PR introduce?** (check at least one) - [v] Bugfix - [ ] Feature - [ ] Code style update...

shc261392